Take the pledge to vote

For a better tommorow#AajSawaroApnaKal
  • I agree to receive emails from News18

  • I promise to vote in this year's elections no matter what the odds are.
  • Please check above checkbox.


Thank you for
taking the pledge

Vote responsibly as each vote counts
and makes a diffrence


Issued in public interest by HDFC Life. HDFC Life Insurance Company Limited (Formerly HDFC Standard Life Insurance Company Limited) (“HDFC Life”). CIN: L65110MH2000PLC128245, IRDAI Reg. No. 101 . The name/letters "HDFC" in the name/logo of the company belongs to Housing Development Finance Corporation Limited ("HDFC Limited") and is used by HDFC Life under an agreement entered into with HDFC Limited. ARN EU/04/19/13618
News18 » Tech
1-min read

This Facebook Flaw May Let Strangers 'Break Into' Your Account

According to a report in the Independent, "there is no need of password to gain access and scammers can also lock you out of your own account"


Updated:July 21, 2017, 3:26 PM IST
This Facebook Flaw May Let Strangers 'Break Into' Your Account
Facebook Smart Home Speakers Aloha And Fiona to Launch by July: Report (Representative image)

A security researcher claims to have spotted a flaw in Facebook's account recovery feature that can let anyone easily break into your account -- that too, without you ever noticing, media reported on Friday. According to a report in the Independent, "there is no need of a password to gain access and scammers can also lock you out of your own account". The discovery was made by 18-year-old James Martindale when he inserted a new SIM card into his phone.

Martindale quickly received a message from Facebook informing him that "he had not logged into his account for a while, despite not having tied the new number to his account", the report said. He then searched for the number on Facebook which brought up a single account. Martindale then attempted to log into the account by using the number as the username and typing in a random password but failed because the password he entered was wrong.

He clicked on 'Forgot Password' option to recover his account but failed again. Martindale searched for the account with the new number and found a list of account recovery options -- comprising an email address and six phone numbers -- for regaining access to the account. "One of these options was for Facebook to text a password reset code to the very number Martindale had just tried to log in with," the report said.

After selecting the option, he received the code and successfully logged into the 'person's' account. "Facebook then gave him the option to change the password, which would have locked the real user out of their account, or to skip that stage, which means he would never have known his account had been hacked," the report pointed out.

Martindale performed the same trick with another new number and it resulted in the same.

Watch Video: Karbonn Aura Note 2 Review


Get the best of News18 delivered to your inbox - subscribe to News18 Daybreak. Follow News18.com on Twitter, Instagram, Facebook, TikTok and on YouTube, and stay in the know with what's happening in the world around you – in real time.

Subscribe to Moneycontrol Pro and gain access to curated markets data, trading recommendations, equity analysis, investment ideas, insights from market gurus and much more. Get Moneycontrol PRO for 1 year at price of 3 months. Use code FREEDOM.

| Edited by: Md. Waquar Haider
Read full article
Next Story
Next Story

Also Watch


Live TV

Countdown To Elections Results
To Assembly Elections 2018 Results